Static task
static1
Behavioral task
behavioral1
Sample
P.O (PA) 452.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
P.O (PA) 452.exe
Resource
win10v2004-20240426-en
General
-
Target
P.O (PA) 452.exe
-
Size
318KB
-
MD5
c353a91f0e522c6f64258dbfd5f98f09
-
SHA1
f4869609334ef3fc2dd4ac9b1352f2d6190eb2fc
-
SHA256
c90a7b0a11fb0c2fd548a5ce6b20a37bd44167b8c8ae7798b8e2488edd65bf73
-
SHA512
001415bcd4c161c88b9a7f55cc6306662ae4bf982bedc060d29e107b62e44d0a370d90cc453e279620ec3620f4d0c18fa32f7782cda6be90a1bf85ca49eec298
-
SSDEEP
6144:+yEAmg+Pm6AjDJsn5LXlP6kzmJa4LSOXfKSI7HJob7SZ:JEAmDPm6U9GLZ7ELHS1S+Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource P.O (PA) 452.exe
Files
-
P.O (PA) 452.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ